AWS DevOps DevOps Configuration Management & Infrastructure as Code 3

Question 1

A DevOps engineer needs to store database passwords used by Lambda functions securely and rotate them automatically. Which AWS service is best suited for this?

Accepted Answer

AWS Secrets Manager

Answer

AWS Secrets Manager provides built-in secret rotation with Lambda integration and is specifically designed for credentials like database passwords.

Question 2

In a CloudFormation template, which intrinsic function retrieves the value of a resource's attribute, such as an S3 bucket's ARN?

Accepted Answer

!GetAtt

Answer

!GetAtt retrieves specific attributes of a resource, like the ARN or DNS name, whereas !Ref typically returns just the resource's primary identifier.

Question 3

Which CloudFormation feature allows you to create reusable templates for common infrastructure patterns that can be shared across accounts?

Accepted Answer

CloudFormation Modules

Answer

CloudFormation Modules allow you to package reusable resource configurations and share them through the CloudFormation registry across accounts.

Question 4

A team wants to deploy identical infrastructure across 20 AWS accounts in 3 regions simultaneously using CloudFormation. Which feature enables this?

Accepted Answer

CloudFormation StackSets

Answer

CloudFormation StackSets extend CloudFormation stacks by enabling deployment of the same template across multiple accounts and regions from a single operation.

Question 5

In AWS CDK, what is a 'Construct' at its most fundamental level?

Accepted Answer

A reusable cloud component representing one or more AWS resources

Answer

A Construct is the basic building block of CDK apps, representing a cloud component that can encapsulate one or more AWS resources with their configuration.

AWS Practice Test

AWS Practice Test

AWS DevOps DevOps Configuration Management & Infrastructure as Code 3